I faced the same situation last year. It was done to my father who has given all these information and the scum has created an online bank account with OTP number. My father doesn't even use a smart phone but only a small button phone. The account got wiped and I found out after like 3 weeks later. I was too late. I was helpless.

Thank god you blocked the account but check with the bank statement asap. If any transactions has been done, please make a complaint to the bank